City: unknown
Region: unknown
Country: Uganda
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 197.239.4.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62442
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;197.239.4.44. IN A
;; AUTHORITY SECTION:
. 593 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021300 1800 900 604800 86400
;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 16:24:19 CST 2022
;; MSG SIZE rcvd: 105
44.4.239.197.in-addr.arpa domain name pointer 44-4-239-197.r.airtel.ug.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
44.4.239.197.in-addr.arpa name = 44-4-239-197.r.airtel.ug.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 61.91.162.90 | attackbots | port scan and connect, tcp 1433 (ms-sql-s) |
2019-12-19 05:26:04 |
| 159.203.82.104 | attackbotsspam | Dec 18 07:26:38 auw2 sshd\[17458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.82.104 user=root Dec 18 07:26:40 auw2 sshd\[17458\]: Failed password for root from 159.203.82.104 port 33783 ssh2 Dec 18 07:32:18 auw2 sshd\[18022\]: Invalid user website10 from 159.203.82.104 Dec 18 07:32:18 auw2 sshd\[18022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.82.104 Dec 18 07:32:19 auw2 sshd\[18022\]: Failed password for invalid user website10 from 159.203.82.104 port 37592 ssh2 |
2019-12-19 04:55:57 |
| 212.71.251.228 | attackspambots | Dec 18 15:24:30 lvps92-51-164-246 sshd[21267]: Failed password for invalid user r.r from 212.71.251.228 port 39930 ssh2 Dec 18 15:24:30 lvps92-51-164-246 sshd[21267]: Received disconnect from 212.71.251.228: 11: Bye Bye [preauth] Dec 18 15:32:04 lvps92-51-164-246 sshd[21291]: Invalid user sensivhostnamey from 212.71.251.228 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=212.71.251.228 |
2019-12-19 05:07:20 |
| 106.197.242.120 | attack | Unauthorized connection attempt from IP address 106.197.242.120 on Port 445(SMB) |
2019-12-19 04:57:20 |
| 143.137.144.85 | attackspambots | Unauthorized connection attempt from IP address 143.137.144.85 on Port 445(SMB) |
2019-12-19 04:52:22 |
| 211.220.27.191 | attack | Dec 18 21:35:00 MK-Soft-VM8 sshd[16541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.220.27.191 Dec 18 21:35:03 MK-Soft-VM8 sshd[16541]: Failed password for invalid user szaplonczay from 211.220.27.191 port 44092 ssh2 ... |
2019-12-19 05:05:43 |
| 106.51.137.113 | attackspam | Dec 18 18:29:38 eventyay sshd[11302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.137.113 Dec 18 18:29:40 eventyay sshd[11302]: Failed password for invalid user QQQ123456 from 106.51.137.113 port 35444 ssh2 Dec 18 18:36:30 eventyay sshd[11501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.51.137.113 ... |
2019-12-19 05:20:13 |
| 45.143.220.112 | attackbotsspam | ET SCAN Sipvicious User-Agent Detected (friendly-scanner) - port: 5060 proto: UDP cat: Attempted Information Leak |
2019-12-19 05:17:09 |
| 86.184.31.219 | attackspambots | Dec 16 07:27:41 venus sshd[662]: Invalid user wwwrun from 86.184.31.219 Dec 16 07:27:41 venus sshd[662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.184.31.219 Dec 16 07:27:43 venus sshd[662]: Failed password for invalid user wwwrun from 86.184.31.219 port 33434 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=86.184.31.219 |
2019-12-19 05:00:51 |
| 177.106.61.239 | attackspam | Dec 18 20:50:04 vtv3 sshd[417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.106.61.239 Dec 18 20:50:05 vtv3 sshd[417]: Failed password for invalid user nicolina from 177.106.61.239 port 58104 ssh2 Dec 18 20:56:34 vtv3 sshd[3774]: Failed password for root from 177.106.61.239 port 39526 ssh2 Dec 18 21:09:59 vtv3 sshd[9632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.106.61.239 Dec 18 21:10:00 vtv3 sshd[9632]: Failed password for invalid user nu from 177.106.61.239 port 59130 ssh2 Dec 18 21:16:53 vtv3 sshd[13460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.106.61.239 Dec 18 21:30:30 vtv3 sshd[19893]: Failed password for root from 177.106.61.239 port 60242 ssh2 Dec 18 21:37:22 vtv3 sshd[23018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.106.61.239 Dec 18 21:37:24 vtv3 sshd[23018]: Failed password for invalid user test |
2019-12-19 04:56:54 |
| 187.16.96.35 | attack | Invalid user ogrish from 187.16.96.35 port 52528 |
2019-12-19 05:03:54 |
| 40.92.75.83 | attack | Dec 18 18:49:55 debian-2gb-vpn-nbg1-1 kernel: [1062559.827544] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.75.83 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=36697 DF PROTO=TCP SPT=10587 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0 |
2019-12-19 05:21:16 |
| 165.231.33.66 | attackspam | 2019-12-18T22:07:20.910095stark.klein-stark.info sshd\[25588\]: Invalid user superuser from 165.231.33.66 port 47202 2019-12-18T22:07:20.918441stark.klein-stark.info sshd\[25588\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.231.33.66 2019-12-18T22:07:22.182566stark.klein-stark.info sshd\[25588\]: Failed password for invalid user superuser from 165.231.33.66 port 47202 ssh2 ... |
2019-12-19 05:10:15 |
| 84.54.58.143 | spamattack | singing in on my stuff is a no no bud |
2019-12-19 05:15:02 |
| 1.52.191.24 | attack | Unauthorized connection attempt from IP address 1.52.191.24 on Port 445(SMB) |
2019-12-19 05:23:37 |